The Clifford group, stabilizer states, and linear and quadratic operations over GF(2). 



m 
O 
O 

(N 

Oh- 
< 
00 



> 

in . 
(N ■ 

^t- : 
o . 

m ■ 
O ■ 

^ : 

i 

^— > ■ 

G ■ 
cd 

^ : 
cr. 



Jeroen DehaenqJ and Bart De Moor 
Katholieke Universiteit Leuven, ESAT-SCD, Belgium 
(Dated: February 1, 2008) 

We describe stabilizer states and Clifford group operations using linear operations and quadratic 
forms over binary vector spaces. We show how the n-qubit Clifford group is isomorphic to a group 
with an operation that is defined in terms of a (2n+l) X (2n + l) binary matrix product and binary 
quadratic forms. As an application we give two schemes to efficiently decompose Clifford group 
operations into one and two-qubit operations. We also show how the coefficients of stabilizer states 
and Clifford group operations in a standard basis expansion can be described by binary quadratic 
forms. Our results are useful for quantum error correction, entanglement distillation and possibly 
quantum computing. 

PACS numbers: 03.67.-a 



I. INTRODUCTION 



Stabilizer states and Clifford group operations play a 
central role in quantum error correction, quantum com- 
puting, and entanglement distillation. A stabilizer state 
is a state of an n-qubit system that is a simultane- 
ous eigenvector of a commutative subgroup of the Pauli 
group. The latter consists of all tensor products of n 
single-qubit Pauli operations. The Clifford group is the 
group of unitary operations that map the Pauli group 
to itself under conjugation. In quantum error correction 
these concepts play a central role in the theory of stabi- 
lizer codes Although a quantum computer working 
with only stabilizer states and Clifford group operations 
is not powerful enough to disallow efficient simulation on 
a classical computer @>|3|, it is not unlikely that possible 
new quantum algorithms will exploit the rich structure 
of this group. In H, we also showed the relevance of a 
quotient group of the Clifford group in mixed state en- 
tanglement distillation. 

In this paper, we link stabilizer states and Clifford op- 
erations with binary linear algebra and binary quadratic 
forms (over GF(2)). The connection between multipli- 
cation of Pauli group elements and binary addition is 
well known as is the connection between commutability 
of Pauli group operations and a binary symplectic inner 
product [l| . In [j] we extended this connection to a link 
between a quotient group of the Clifford group and binary 
symplectic matrices (there termed P orthogonal) . In this 
paper we give a binary characterization of the full Clifford 
group, by adding quadratic forms to the symplectic op- 
erations. In addition we show how the coefficients, with 
respect to a standard basis, of both stabilizer states and 
Clifford operations can also be described using binary 
quadratic forms. Our results also lead to efficient ways 
for decomposing Clifford group operations in a product 
of 2-qubit operations. 



II. CLIFFORD GROUP OPERATIONS AND 
BINARY LINEAR AND QUADRATIC 
OPERATIONS 



In this section, we show how the Clifford group is iso- 
morphic to a group that can be entirely described in 
terms of binary linear algebra, by means of symplectic 
linear operations and quadratic forms. 

We use the following notation for Pauli matrices. 



COO =Too = CO = 

001 = r 01 = (Tx = 

cio = no = cr z — 

(Til = = 

Tn = i<7y = 
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We also use vector indices to indicate tensor products 

v 
in 



of Pauli matrices. If v,w £ Z 2 ' and a — 
then we denote 



e z 2n 



2 - 



T a = T„ 



Ti hi 



(i) 



If we define the Pauli group to contain all tensor prod- 
ucts of Pauli matrices with an additional complex phase 
in {I, i, —I, — i}, an arbitrary Pauli group element can be 
represented as i s (— f) c r n , where 5, e £ Z 2 and u £ Z|™. 
The separation of S and e, rather than having i 1 with 
7 e Z4, is deliberate and will simplify formulas below. 
Throughout this paper exponents of i will always be bi- 
nary. As a result i 5l i &2 = i s i+ s 2(~l) s i s 2 . Multiplication 
of two Pauli group elements can now be translated into 
binary terms in the following way: 
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Lemma 1 If a\ , a 2 £ 



<5i, £2, £i, £2 £ Z2 and t is 



2 



defined as in Eq. the 



i-iy 



» 5l (-l) ei r ai ^(-l) £2 r Q2 =»» 
iirai/i (5 12 = <5i + #2 

ei2 = ei + £2 + <5i#2 + aft/ ai 

«12 =ai+a2, 
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0„ 0„ 



where multiplication and addition of binary variables is 
modulo 2. 

These formulas can easily be verified for n — 1 and 
then generalized for n > 1. The term a^Uai "counts" 
(modulo 2) the number of positions k where wi^ = I 



and t>2fc = 1 (with a\ 



m 



and a2 = 



v 2 

W2 



), as 



only these positions get a minus sign in the following 
derivation: 



= (— iy w ~l-kV2k ( j Vl l'+ v 2k a Wl k +W2 k 

— (—1 \ W lkV2k T . . 

— \ L ) T Vl k +V 2k ,W lk +W 2k - 

A Clifford group operation Q, by definition, maps the 
Pauli group to itself under conjugation: 

for some S,e,b, function of a. 

Because Qr ai r a2 Q t = (Qr ai (3 t )((3r a2 (5 t ), it is suffi- 
cient to know the image of a generating set of the Pauli 
group to know the image of all Pauli group elements and 
define Q (up to an overall phase). In binary terms it is 
sufficient to know the image of t^, k = 1, . . . ,n where 
bk, k = 1, . . . , n form a basis of Z|". 

For this purpose it is possible to work with Hermitian 
Pauli group elements only as the image of a Hermitian 
matrix under X — > QXQ^ will again be Hermitian (and 
the images of Hermitian Pauli group elements are suffi- 
cient do derive the images of non Hermitian ones). In 
our binary language Hermitian Pauli group elements are 
described as 



■a 1 Ua 



as a T Ua counts (modulo 2) the number of m in the ten- 
sor product r a . For t\\ is the only non- Hermitian (actu- 
ally skew Hermitian) of the four r matrices and multipli- 
cation with i makes it Hermitian. 

Now we take the standard basis of Z^™ e k, k = 1, . . . , n 
where ek is the A:-th column of l2n , and consider the gen- 
erating set of Hermitian operators r efe . These correspond 
to single-qubit operations o~ z and a x . We denote their 
images under X — > QXQ^ by i dk (— l) hk r Ck and assemble 
the vectors Ck in a matrix C (with columns Ck) and the 
scalars dk and hk in the vectors d and h. As the images 
are Hermitian, dk = c\\Jck or d = diag(C T [/C) (with 
diag(A) the vector with the diagonal elements of X). 

Now, given C, d and h, defining the Clifford oper- 
ation Q, the image i S2 (— l) e2 T& 2 of i Sl (— l) ei Tt 1 under 



X — > QXQ^ can be found by mutliplying those operators 
i dk {— \) hk r Ck for which b\ k = 1- By repeated application 
of Lemma Q] this yields 

h =Ch 

&2 = 5i + d T b\ 

e 2 = ex + h T h + bJ{\ows(C T UC + dd T )bx + M T &i 

where lows(A) is the strictly lower triangular part of X . 
These formulas can be simplified by introducing the fol- 
lowing notation 



C 
U 
h 
h 



C 

d T 1 

U 0' 
1 

h 

h 
Si 

i 6l T bl 



b 2 

= i S2 n 2 



We then get the following theorem 

Theorem 1 Given C and h, defining the Clifford op- 
eration Q as above, the image under X — ► QXQ^ of 

(-iyiT h is (-iy 2 T- b2 with 

e 2 = ei + h T b 1 + bxlowsiCFUC)^ 

With this theorem we can also compose two Clifford 
operations using the binary language. To this end we 
have to find the images under the second operation of 
the images under the first operation of the standard basis 
vectors. This can be done using Theorem ^ 

Theorem 2 Given C\, h\, C2 and h 2 , defining two Clif- 
ford operations Q\ and Q2 as above, the product Q21 = 
Q2Q1 is represented by C%\ and h 2 \ given by 

C21 = C 2 C\ _ 

h 21 =hi + C{h 2 + diag(C^lows(C 2 T UC 2 )C 1 ) 

The next question is which C and h or C, d and h 
can represent a Clifford operation. The answer is that C 
has to be a symplectic matrix (and d has to be equal to 
diag(C T L r C) as above). If we define P to be U + U T , we 
call a matrix symplectic if C 7 PC = P. One way to see 
that C has to be symplectic is through the connection of 
the symplectic inner product b T Pa with commutability 
of Pauli group elements: 



T a n = (-1) 



b 1 Pa 



TbT a 



Since the map X — > QXQ^ preserves commutability, a 
and b have to represent commutable Pauli group elements 
(b T Pa = 0) if and only if Ca and Cb represent com- 
mutable elements (b T C T PCa = 0). This implies that C 
has to be symplectic. 
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That symplecticitv is also sufficient was first implied 
by Theorem 1 of [i[ (almost, as this result was set in 
the context of entanglement distillation where the signs 
e play no significant role). The idea is to give a construc- 
tive way of realizing the Clifford operation Q given by C 
and h. This can be done using only one and two-qubit 
operations, which makes the result also of practical use. 
In Sec. lIVI we give two such decompositions that are more 
transparent than the results of Q. 

First, to conclude this section, we complete the binary 
group picture by a formula for the inverse of a Clifford 
group element, given in binary terms. 

Theorem 3 Given C\ and h\, defining a Clifford oper- 
ation Qi as above, the inverse Qi = Q^ 1 is represented 
by 



c 2 =c 1 - 1 = 

ho = C~ T h 



Cf 1 

d T c- Y 1 

diag(C~ J 



PClP 

djpcfp i 

lows^UC)^ 1 ) 



These formulas can be verified using Theorem [3 Fi- 
nally note that since the Clifford operations form a group 
and the matrices C are simply multiplied when compos- 
ing Clifford group operations, the matrices C with C 
symplectic and d = diag(C T £/C) must form a group of 
(2n + 1) x (2n + 1) matrices that is isomorphic to the 
symplectic group of 2n x In matrices. This can be easily 
verified by showing that 

diag(Cf CjUC 2 Ci) = C* 1 T diag(C* 2 T C/C 2 ) + diag(C* 1 T [/Ci) 

This follows from the fact that C T UC + U is symmet- 
ric when C T PC — P and x T Sx = x T diag(S) when S 



is symmetric. 
diag(C*~ T [/C" 



In a similar way it can be proven that 
- 1 ) = C- T diB,g{C T UC). 



III. SPECIAL CLIFFORD OPERATIONS IN 
THE BINARY PICTURE 

In this section we consider a selected set of Clifford 
group operations and their representation in the binary 
picture of Sec. [H] 

First, we consider the Pauli group operations Q = r a as 
Clifford operations. Note that a global phase cannot be 
represented as it does not affect the action X — > QXQ^ . 
To construct C and h we have to consider the images of 
the operators r efc representing one-qubit operations o~ x 
and o~ z . One can easily verify that r a is represented by 



C 
h 



T 2n 

Pa 



(2) 



Second, note that Clifford operations acting on a sub- 
set a C {1, . . . , n} consist of a symplectic matrix on the 
rows and columns with indices in a U (a + n), embed- 
ded in an identity matrix (that is, with ones on positions 
Ck.k =l,^aU(a + n) and Ck,i = if k ^ I and k or 
I ^ aU (a + n).) Also h k = if k g a U (a + n). 



Third, qubit permutations, are represented by 



C = 
h =0 



n o 
o n 



where IT is a permutation matrix. 

Fourth, the conditional not or CNOT operation on two 
qubits is represented by 



C = 



110 
10 
10 
11 







Fifth, by composing qubit permutations and CNOT 
operations on selected qubits any linear transformation of 
the index space \x) — > \Rx) can be realized, where x € Zf 
labels the standard basis states \x) = \xi) ® . . . ® \x n ) 



and R G 



is an invertible matrix (modulo 2). This 



operation is represented in the symplectic picture by 



C = 
h = 



R- T 




(3) 







The qubit permutations and CNOT operation dis- 
cussed above are special cases of such operations as qubit 
permutations can be represented as \x) — > |Ilx) and the 

1 0" 



CNOT operation as 



1 1 



x). 



Decomposing a general linear transformation R into 
CNOTS and qubit permutations can be done by Gauss 
elimination (a well known technique for the solution of 
systems of linear equations) . In this process R is operated 
on on the left by CNOTS and qubit permutations to be 
gradually transformed in an identity matrix. The process 
operates on R, column by column, first moving a nonzero 
element into the diagonal position by a qubit permuta- 
tion, then zeroing the rest of the column by CNOTS. The 
inverses of the applied operations yield a decomposition 
of R. 

Sixth, we consider Hadamard operations. The 
Hadamard operation on a single qubit Q = H = 



l 

V2 



is represented by C 



and h = 0. A 



Hadamard operation on a selected set of qubits is repre- 
sented by the embedding of such matrices in an identity 
matrix as explained above. As a special case we mention 
the Hadamard operation on all qubits, which is repre- 
sented by C — P and h = 0. 

Seventh, we consider operations e^ 7r / 4 ^ Ta = -^{I+iTa) 



where a G 



a 

i T Ua 



and 



operations are represented by 



C T Ua 



r a . These 



(4) 
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This is proved in the Appendix. 

Finally, we mention that real Clifford operations have 
d=0. 



IV. DECOMPOSITIONS OF CLIFFORD 
OPERATIONS IN ONE AND TWO-QUBIT 
OPERATIONS 

In this section we write general Clifford group opera- 
tions as products of one and two-qubit operations using 
the binary picture. This does not only complete the re- 
sults of Sec. |nj showing that every symplectic C and 
arbitrary h represent a Clifford operation. It is also of 
practical use for quantum computing applications as well 
as entanglement distillation applications since two-qubit 
operations can be realized relatively easily and the num- 
ber of two-qubit operations needed is "only" quadratical 
in the number of qubits. We give two different schemes. 

First, for both schemes, we observe that the main prob- 
lem is realizing C, not h. For once a Clifford operation 
represented by C and h! is realized, we can realize h by 
doing an extra operation Q — Tcp(h+h') on the left or 
Q = Tp(^ + /,/) on the right. This can be proved by using 
Eq. 101 and Theorem El 

The first scheme realizes C by two-qubit operations, 
acting on qubit k and I, of the type e t ^' i ' Ts with sym- 



plectic matrices (/ 



one) only at positions k, l,n + k and n + I. The scheme 
works by reducing a given symplectic matrix C to the 
identity matrix by operating on the left with two-qubit 
operations. The product of the inverses of these two- 
qubit matrices is then equal to C. The reduction to the 
identity matrix is done by working on two columns m 
and n + m at a time, for m = 1, . . . , n. First columns 
1 and n + 1 are reduced to columns 1 and n + 1 of the 
identity matrix. Because through all the operations C 
remains symplectic, one can show that as a result also 
rows 1 and n + 1 are reduced to rows 1 and n + 1 of the 
identity matrix. Then one can repeat the same process 
on the submatrix of C obtained by dropping rows and 
columns 1 and n + 1, until the whole matrix is reduced 
to the identity matrix. 

Let a = {1, 1 + n} and (3 = {1,1 + n}. The first step in 
reducing columns 1 and n + 1 of C to the corresponding 
columns of the identity matrix is a qubit permutation, 
exchanging qubit 1 with some qubit k to make C QjCt in- 
vertible. This can be done for if all Cp ia would be rank 
deficient, we would have cf Pc n +i — which is in conflict 
with the symplecticity of C . (Note that a 2 x 2-matrix is 
invertible if and only if it is symplectic). Next, we per- 
form two-qubit operations e 1 ^/ 4 -' 7 '" on qubits 1 and I with 
®a = Ca,n+i and ap = cp.i, for I = 2, . . . , n. Such an op- 
eration changes C through multiplication with I + aa T P. 
For the first column this means that c\ is replaced by 



as a Pci — 



where P 2 — 



1 °a,ri+ 

1 

1 



lP2C a ,l+C 1 p 1 P2Cf3s = 1 + 0=1, 

This way cp^i is reduced to 0. 



C QiQ is changed at every step but remains invertible 
(and symplectic). Note that through these operations 
also the other columns of C are changed. After the first 
column has been zeroed on all positions except a, we 
tackle column n + 1 with operations e^ 7r / 4 ) Ta on qubits 
1 and I with a a = c Qi i and ap = C/3 jK +i, / = 2, . . . ,n. 
These operations have no effect on c\ because a 1 Pc\ = 
Ca i-P2C Q ,i+0 = 0, and reduce cp. n +i to in the same way 
as was done for the first column. After these operations 
we are left with c\ and c„+i all except for C QjCe which 
equals an invertible matrix. This matrix can be trans- 
formed into an identity matrix by a one-qubit symplectic 
operation on qubit 1. One-qubit Clifford operations can 
be easily made by one-qubit operations of type e 1 ^/ 4 ^". 

An advantage of this scheme is that it is efficient if 
only some columns of C (or rows, as one can also work 
on the right) are specified while the other columns do not 
matter. This is the case in the entanglement distillation 
protocols of . 

The second scheme also takes a number of steps that 
is quadratical in n. It is based on the following theorem, 
which will also be of importance in Sec.[V] and for which 
we give a constructive proof. 

Theorem 4 If C € Z^™* 2 ™ is a symplectic matrix 
(C T PC — P), it can be decomposed as 



P) where a can be nonzero (i.e. C 





Ti 



(5) 



In — r 


Vi 


Z3 + 


ViVl 


V 2 4 


VlZ 2 " 







Zi 




-Z{Vl I r + 


Z1Z2 




r T -T 








In—r 



















It 


v 2 T 




Z-2 








Tf T 
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Vi - 
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v 2 - 













I, 


vi 


Z2 
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In—r 

























It . 













T 2 



(G) 



where T\ and T2 are invertible n x n matrices, Z± and 
Z2 are symmetric r x r matrices, Z3 is a symmetric (n — 
r) x (n — r) matrix, V\ and V2 are (n — r) x r matrices 
and the zero blocks have appropriate dimensions. 



Proof: To prove this theorem We consider C as a 
E' F' 
G' H' 

Then, we find invertible R\ and R2 in 1^ xn such that 



block matrix C = 





I r 



where r is the rank of G' . This is 



a standard linear algebra technique and can be realized 
(for example) by (1) setting the first n — r columns of 
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i?2 equal to a basis of the kernel of G' , (2) choosing the 
other columns of R2 as to make it invertible, (3) setting 
the last r columns of R\ equal to the last r columns of 
R2 multiplied on the left by G (This yields a basis of 
the range of G"), and (4) choosing the other columns of 
Ri as to make it invertible. By construction, this implies 
"00" 



G'i?2 — Ri 



I r 



Now we set 



~RJ " 




' R 2 


R^ 1 


C 


i? 2 - T 



En E12 Fn F12 

E21 E22 F21 F22 

H n H u 

I r H 2 i H12 



(7) 



Because the three matrices in the left-hand side of Eq. Q 
are symplectic, so is the right-hand side. This leads to 
the following relations between its submatrices: 



E Ii 

EiiHn + E 2l H 2 i 
E11H12 + E21H22 



E. 



22 



E22 = 



F11H12 
12 



Fl 2 H 



Ef 2 Hu + E 22 H 2 i + F21 
Ei 2 Hi2 + E22H22 + F22 
F21H21 + H^Fu + HJ1F21 
F 2 iH 22 + HuFi2 + H 2 T 1 F 2 i 
F22H22 + hJ 2 Fi2 + HToF? 



'22^22 




I 




I 





n-T 



(8) 
(9) 

(10) 

(11) 
(12) 

(13) 
(14) 
(15) 
(16) 



With Eq. © and Eq. © we find Hu=E^ . Now, 



if we replace R2 by R2 



E 



11 



both Hu and Eu 





I r 

are replaced by I n - r - We will assume that this choice 
of R 2 was taken from the start. Then, from Eq. © and 
Eq. (0 we find Hi 2 = 0. From Eq. {HJ we learn that 
E22 is symmetric. From Eq. I|12f> and Eq. H13|) we find 
F21 = E{ 2 +E% 2 H 2 i and F 22 = I + E 2 2H 2 2- Substituting 
these equations in Eqs. (|14|) . (|15|) and l|16|) . we find that 
Fn + H^E^ is symmetric, F12 = -ffJi + Ei 2 H 2 2, and 
H22 is symmetric. Setting T\ = Ri, T 2 = R% (with R 2 
chosen as to make Eu = Hu = I), Vj. = Ei 2 , V 2 — H^, 
Zi = E22, Z 2 = H22 and Z 3 = Fu + ViV 2 , we obtain 
Eq. JSJ. Note that Z 3 is symmetric because Fn + V 2 Vi 
and V 2 Vi + ViV 2 T are symmetric. Finally Eq. |B|can be 
easily verified. This completes the proof. □ 
To find a decomposition of C in one and two-qubit op- 
erations we concentrate on the five matrices in the right- 
hand side of Eq. ©, all of which are symplectic. Clearly 
the first and last matrix are linear index space transfor- 
mations as discussed in Sec. IIIII These can be decom- 
posed into CNOTs and qubit permutations. The middle 
matrix corresponds to Hadamard operations on the last 
r qubits. We will now show that the second and fourth 
matrix can be realized by one and two-qubit operations 
of the type e 1 ^/ 4 ' 1 " 3 . First note that both matrices are 



of the form 



/ Z 
/ 



with Z symmetric. These matrices 



form a commutative subgroup of the symplectic matrices 
with 



/ Z a + Z b 

I 



' I 


Z a ~ 




' I 


z b ~ 







I 







I 





Now, we realize 



I Z 
I 



with one and two-qubit op- 



erations by first realizing the ones on off-diagonal po- 
sitions in Z and then realizing the diagonal. Entries 
Zk,i = Zi t k = 1 are realized by operations e 1 ^/ 4 -* 1 " 3 with 
o-k = 0,1 = 1 and a m = if m ^ k and m ^ I. These are 
two-qubit operations which realize the off-diagonal part 
of Z and as a by-product produce some diagonal. Now 
this diagonal can be replaced by the diagonal of Z by 
one-qubit operations e 1 ^/ 4 ^ with = 1 and a m = if 
m =/= k, which affect only the diagonal entries Zk t k- This 
completes the construction of C by means of one and 
two-qubit operations. 



V. DESCRIPTION OF STABILIZER STATES 
AND CLIFFORD OPERATIONS USING BINARY 
QUADRATIC FORMS 

In this section we use our binary language to get fur- 
ther results on stabilizer states and Clifford operations. 
First, we take the binary picture of stabilizer states and 
their stabilizers and show how Clifford operations act on 
stabilizer states in the binary picture. We also discuss the 
binary equivalent of replacing one set of generators of a 
stabilizer by another. Then we move to two seemingly 
unrelated results. One is the expansion of a stabilizer 
state in the standard basis, describing the coefficients 
with binary quadratic forms. The other is a similar de- 
scription of the entries of the unitary matrix of a Clifford 
operation with respect to the same standard basis. 

A stabilizer state \ip) is the simultaneous eigenvector, 
with eigenvalues 1, of n commutable Hermitian Pauli 

% where Sk € 



group elements i' k (— 1) fe r Sfc , k = 1, . 



1, . . . ,n are linearly independent, fk,bk € ^2 
s^Usk- The n Hermitian Pauli group elements 



^2™ i k — 
and f k = 

generate a commutable subgroup of the Pauli group, 
called the stabilizer S of the state. We will assemble the 
vectors Sk as the columns of a matrix S € Z;;™*™ and the 
scalars fk and bk in vectors / and 6 e 2j. This binary 
representation of stabilizer states is common in the litera- 
ture of stabilizer codes . The fact that the Pauli group 
elements are commutable is reflected by S T PS = 0. One 
can think of S, f T and b T as the "left half" of C, d T and 
h T of Sec. 
S 
f 

If \ip) is operated on by a Clifford operation Q, Q\ip) is 
a new stabilizer state whose stabilizer is given by QSQ^ . 
As a result, the new set of generators, represented by S' 



n] In the style of that section we also define 
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and b' can be found by acting with C and h, representing 
Q, as in Theorem ^ and Theorem [21 One finds 

S' =cs 

b' =b + S T h + diag(S T lowa(C T UC)S) 

The representation of S by S and b is not unique as 
they only represent one set of generators of S. In the 
binary language a change from one set of generators to 
another is represented by an invertible linear transforma- 
tion R acting on the right on S and acting appropriately 
on b. By repeated application of Lemma^one finds that 
S and b can be transformed as 



where y 



Va 
Vb 



with y a £ Zj" and yb S V 2 b . 



S' =SR 
b' = R T b - 



In words this theorem reads as follows. If the coeffi- 
cients of a stabilizer state \ip), with respect to the stan- 
dard basis {|x)|a; G ZJ}, are considered as a function of 
the binary basis label x, this function is nonzero in an 
r a + n> dimensional plane (a coset of a subspace of Z£ ) 
and the nonzero elements are (up to a global scaling fac- 
tor) equal to !,%,— ! or — i, where the signs are given by a 
binary quadratic function over the plane and i's appear 
either in a subplane of codimension one or nowhere (if 
fa = 0). 

Proof: First we write S as a block matrix 



ding(R T lows(S T US)R) 



S = 



V 

w 



Below we will refer to such a transformation as a stabi- 
lizer basis change. 

Before we state the main results of this section, we 
show how binary linear algebra can also be used to de- 
scribe the action of a Pauli matrix on a state, expanded 
in the standard basis. 



with V, W € Zg " . Then we perform a first stabilizer 
basis change R\, transforming W to W' 1 ' = WR\ = 



[W^ 0], where W£ € 

rank(VT). This is achieved by setting the last columns 
of Ri equal to a basis of the kernel of W and choos- 
ing the other columns as to make it invertible. As a 



(i) 



j,nx(r a +ri) 
J 2 



and 



Tb = 



where a 



E 

V 

w 



x-\-w \ x ) (17) result the columns of are a basis of the range of 



.re: 



This is proved as follows. From a x \b) 



\b+l) with b e Z 2 , we have rr -i J2 X ^1^) = J2 X ^ 



W. We also write the transformation of V in block form 
as V& = VRx = \y$ V c (1) ]. Because is full rank, 

Vc 1 ^ must also be full rank. 

Now we perform a second stabilizer basis change R2 = 



w) = ^2 x i(>x+w\e)- From a z \b) = (— l) b |6), we then find 
Eq. U3). 

Now we exploit our binary language to get results 
about the expansion in the standard basis of a stabilizer 
state as summarized in the following theorem, for which 
we give a constructive proof. 

Theorem 5 (i) If S and b represent a stabilizer state 
\ip) as described above, S and b can be transformed by 
an invertible index space transformation \x) — > \T~ 1 x) 



, transforming = [VA V c 

(2) 



(l)l 



to = 



with T G Z" xn 
R e K, IX ™ into the f° rm 



Rab,ab ( 
Rc,ab J 

V^R 2 = [V^> Vr>], where KT e Z^ xr " and r a 
r c = rank(V). This is achieved by setting the columns 
r a + 1 till r a + rb of R2 equal to a basis of the kernel 
of V^ 1 ' and choosing the first r a columns as to make 
it invertible. (Note that the last r c columns of R2 are 
equal to the corresponding columns of the identity matrix 
and no linear combination of them can be in the kernel 
of as Vc is full rank). As a result the columns 
of [V a Vc ] are a basis of the range of V. We also 



and an invertible stabilizer basis change wr it e the transformation of W w in block form as W {2) = 



S' = 



b' 



T T 
T- 1 
I 



bob 



SR = 



Z 



h. 



Ir c 





I r 





f T 

■I a 



w^r 2 = [wr> W b {2 > 0]. 

Next we perform an index space transformation |x) — > 
iT^x) with T = [Wi 2) W b (2) W^} where the columns 
are chosen as to make T invertible. As a result 



(18) 



is transformed to = T T V^ = [V} 1 V c 
is transformed to = T" X W { ^ = 



where Z is full rank and symmetric and f a = diag(Z). 
(ii) The state \tp) can be expanded in the standard basis 

as 



Because = 



also finds = 



1/(3) 
W(3) 

z 









c 3)l 






satisfies PS® = 0. one 



V c 



(3) 



ric and V c 



(3) 



|^) = (l/v/(2(^)))x 



E 



^(-iy?V«(-l)(vZl0WB(Z+f a fZ)y a +bZ b y)\ T V } 



Ra 



ca 

is full rank. 

I r „ 







V 



(3)" 



V(3) 
yea 



'-rb 





where Z is symmet- 

vf 1 

A final stabilizer basis change 


(i transforms V^ to 



(3)- 



7 



and leaves = W un- 



Z 

y = y( 3 'i? 3 = ooo 
o o i Tc 

changed. Through all the transformations we also have 
to keep track of / and b. We find /' = diag(S" T £/S") = 



diag(Z) 




Kb 

be 



Setting R = R1R2R3 we find 

R T b + diag(i? T lows(y T iy + dd T )R). 

We still have to prove that Z is full rank. First note 



that Z = Wa (2) 



Va 



(2) From SW T PS<& = and the 

] and [W!i 2) W b {2) ] arc full rank, it 
(2) 

follows that the columns of W b span the orthogonal 



fact that [K (2) Vc 2) 



complement of [Va V c ] and the columns of V c span 

(2) (2) 

the orthogonal complement of [W a W b ]. Assume now 
that there exists some x € Z^" with 1 ^ and Zx = 0, 



then VP x is orthogonal to the columns of Wa 

(2) (2) 

vr x is also orthogonal to the columns of W b ' . There- 
fore vP a; is a linear combination of the columns of vj 2 ^ ■ 

(2) (2) 

This is in contradiction with the fact that [Va V c ] is 
full rank. Therefore, Z is full rank. This completes the 
proof of part (i). 

To prove part (ii), first observe that applying \x) — > 



(2) 



And 



by 



and 



\T 1 x) to \ip) simply replaces \T 
stabilizer basis transformations only change the descrip- 
tion of a stabilizer state but not the state itself. There 
fore, we have to prove that 



E 



r[i) (_j)/Jt/a(_i)(3/riows(z+/ a /J)a a +6^j/)| v ) 

(19) 

is an eigenvector with eigenvalue one of the operators 
¥ k (— l) bkT s' k described by S' and b' . For k = 1, . . . ,r a , 
we have 



Zei 










4 




efe 





— fak — 


f' k 


K 


= I 


abk 



where efe is the fc-th column of I r 
find 



With Eq. O we 



^(-l) 6 '*7yj0) 

= J2yi ifak (~l) babk (-l)( Ze ^ T y° (-i)f!iVa+e k ) x 
^l-j{(ya+e k ) T lowS(Z+f a f^)(y a +e k )+bl{y a +e k )+bly b ) x 



= Y. y [i fak (-iV- Va (-i) fak i-i) f ' Vafak x 

(_iyl-Zy a +b abk (_ 1 )(yri0WS(Z+/ a /J)y a ) x 
(-l}(4(Z+f a fZ)y a +bZy a +b abk +bZy b )l 



For k 



, rb we have 














efe 









f'k 


= 


K 


= b 


abk 



where now efe is the fc-th column of I(r a +r b ) ■ 
Eq. (jnjl we find 



With 



jh 



(-1)' 



k t 



= E. y [(-i) b ^H) / » y "x 

(__l)(yalows(Z+/ a / a r )y a +&^( 2/ +e fc ))| 1/ 



For k — r + l,...,n, we find with Eq. 1171) that 
if'k(-l) b 'k rs > k \x) = (-l)*^ 6 '*^). The state \cj>) is clearly 
an eigenstate of this operator as Xk + b' k = for all states 

I a;) = I ? ) and = r& + 1, • • ■ , n. This completes the 
proof. □ 
Finally, we show how also the entries of a Clifford ma- 
trix can be described with binary quadratic forms, by 
using Theorem This leads to the following theorem 
for which we give a constructive proof. 



Theorem 6 Given a Clifford operation Q, represented 
by C and h (or C ,d and h) as in Sec.\^ Q can be written 
as 

Q= (l/V^) J2 Xb eZz~ r Ex r eZ£ Ex c gz| 

(^_lYl T lows(Z br +d br df r )x br x 

^iyU0WS(Z bc+ d bc dl) Xb ^ TiXbr ^ T ^l Xbc + t y 



where Xbr — 



Xb 



and Xbc = 



Xb 
X c 



T X ,T 2 € Z" x ™ 



are invertible matrices, Zb r ,Zb c £ 2™ are symmetric, 
dbr = diag(Zbr), e?6c = diag(Zbc) and hb Cl t G Z^ 1 . 

Proof: The proof is based on the decomposition of C 
as a product of five matrices as in Theorem^] Due to the 
isomorphism between the group of symplectic matrices C 
and the extended matrices C as defined in Sec. [n] this 
decomposition can be converted into a decomposition of 
C as follows. 

c = c^c^c^c^c^ 



Tf 1 

Ti 

1 

- r 



I n — r 

I r 





In Zbr 
I n 

dl 1 



I r 



1 



In 


Zbc 


0" 




r t~ t 





" 





In 










T 2 








dl 


1 










1 



8 



where Z br = 



Z3 



v 2 
z. 



dbr = 



V 1 _ 

V{ Z x \ Zhc _ [V 2 T 
diag(Zfc r ) and dbc = diag(Zf, c ). 

If we define Clifford operations by and = 
0, k = l,...,5 L the operation Q^Q^Q^Q^Q^ is 
represented by C and some vector h', that can be found 
by repeated application of Theorem [3 The vector h of 
the given Clifford operation Q can then be realized by an 
extra operation to the right with = I and = 
h + h' . Now, is a Hadamard operation on the last 
r qubits. Because a Hadamard operation on one qubit 
can be written as H x = (1/V2) E6,.,& cG z 2 ("i) 6 ^ IM ( & < 
the Hadamard operation on r qubits can be written 
as H r (l/y/2 F )Y,x r ,x c ei,r(-l) x '~ Xc \x r ){x c \ and, including 
the n — r qubits that are not operated on, as 



Q 



(3) 



(1/V¥) J2 E (-l) B ' Xe |*6r)<Z6c|. 



x b & 



,x c & 



(20) 

Considered as a matrix this is a block diagonal matrix 
with 2™~' r identical 2 r x 2 r blocks with entries that are 
1 or —1. The index x addresses the blocks and the 
indices x c and x r adress the columns and rows inside 
the blocks. Now we will show that the matrix Q can 
be derived from this matrix by multiplying on the left 
and the right with a diagonal matrix and a permutation 
matrix representing an affine index space transformation. 
First we concentrate on and Q^ 4 \ and 
have the form 



C = 



I Z 
0/0 
d 1 



We show that such a matrix (together with h = 0) 
represents a diagonal Clifford operation 



x&Zl 



(-i) STx (-l)* Tlo ™(z+ iSr >\ x )(x\. (21) 



This result can be derived using the decomposition in 
(diagonal) one and two-qubit operations given in Sec. II VI 
but can more easily be proved by showing that the Pauli 
group elements r efc , with the fc-th column of I<im are 

mapped to operators represented by the columns of C 



QTe k Q^ 



under X -> QXQ^. Clearly, for k = 1, . 
i~e k QQ^ = T ek (as Q and r ek are diagonal). For k — 
n + 1, . . . , 2n let ej. again be the fc-th column of Im and 
e' k the fc-th column of /„ . Then we have 



Ql~e k Q^ T e k 

= ^2 x [{-i) STx (-l) xTloVfSi2+i3T)x \x}{x\]x 

^^[(+j)d T ( K + e ;)^_ 1 ^(x+e^) T lowS(Z+<id T )(i : +e' fc )| ;I ,^ a ,| 



\d T xd T ei 



(_l) :rT (^+rf<i T ) e 'fc] = i^ k . 



Bringing the second r ek from the left-hand side to the 
right-hand side we finally prove Eq. (|21|l . 



Combining Eqs. J3U|) and l(2"T]) . we find 



Q(2)Q(3)Q(4) = 



y 



:[(-<) 



d hr x b 



(— l) X r :E <:(— lYl,\OyHS{Z bT +d hT d1 r )x br x 



To take into account the index space transformation C^ 1 ) 
we simply have to replace \xb r ) by \T\Xb r )- For and 
wc first define t. and h\, c £ ZS by writing as 

' Then, with Eqs. © and ([T7| we find 



I, / i (6) = 



T 2 hbc 



(x bc \C^C^ = (-l) h *- Xh °{Tz X x bc +t\. This completes 
the proof. □ 



VI. CONCLUSION 

We have shown the relevance of binary linear algebra 
(over GF(2)) for the theory of stabilizer states and Clif- 
ford group operations. We have described how the Clif- 
ford group is isomorphic to a group that can be entirely 
described in terms of binary linear algebra. This has led 
to two schemes for the decomposition of Clifford group 
operations in a product of one and two-qubit operations, 
and to the desription of standard basis expansions of both 
stabilizer states and Clifford group operations with bi- 
nary quadratic forms. 



APPENDIX: PROOF OF EQUATION © 



Let be the fc-th column of I^n , k = 1 , 



,2n. Then 



we have to find the images of r efc (Hermitian matrices) 
under X -> QXQ^ with Q = e^/ 4 ^ = -^=(1 + ir a ) to 
yield the fc-th column Ck = Cek of C and the fc-th entry 
hk = e\h of h. We find 

i<Z Vc *{-\) h *T Ck 
= 72^ + * T a) T ^ 7f( J - iT d) 
= 2^ Te k T a T e k T a) + 2*( TaTe i» _ T e k T a) 

= |(1 + (-l) e " PQ )r efc + - (-l)^)r 5 Te fe , 

where in the last step we used r| = / and T a T b — 
(— l) b Pa T b T a as follows from Lemma^ When e^Pa = 
we find Ck = &k and hk = 0. When e\Pa = 1 we find 



i C * Uc *(-l) h *T Ck =lT- a T e 



= ij a Ua 



(-1) 



ei Ua 



T a +e k j 



From this formula it can be read that Ck = a + e^. 
With ii 



a 1 Ua 



■a 1 Ua+li 



ua (- with the addition in 
the exponents modulo 2) and (a + ek) T U(a + e^) = 
a T Ua + e\Pa + e^Uek = a T Ua + 1, we also find that 
hk = a T Ua + e^Ua. 

Combining the two cases e\Pa — and e^Pa = 1 
we find Ck = £k + a {^Pa) = (I + aa T P)ek, yielding 



9 



C = (I + aa T P). For h we find h k = (elPa){a T Ua + 
e T Ua). With (e^Pa)(e^Ua) — e^Ua this reduces to 
h k = el(Paa T Ua + Ua) and h = (I + aa T P) T Ua. This 
completes the proof. □ 
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